Deck 14: Business Continuity

Question 1

Which of the following is a location that provides office space,but the customer must provide and install all the equipment needed to continue operations?

A)cold site
B)hot site
C)spare site
D)warm site

Answer 1

A

Question 2

An enterprise contingency plan is copying information to a different medium and storing it at an off-site location so that it can be used in the event of a disaster.

Answer 2

False

Question 3

Forensics is the application of science to questions that are of interest to the technology professions.

Answer 3

False

Question 4

When does a company need to identify mission-critical business functions and quantify the impact a loss of such functions may have on the organization in terms of its operational and financial position,what should be performed?

A)business risk analysis
B)business alert assessment
C)business productivity analysis
D)business impact analysis

Question 5

What type of element addresses the recovery of critical information technology (IT)assets,including systems,applications,databases,storage and network assets?

A)enterprise recovery
B)disaster recovery
C)business recovery
D)crisis management

Question 6

Resumption planning is used for the recovery of critical business functions separate from IT,such as resuming a critical manufacturing process.

Question 7

The process of identifying exposure to threats,creating preventive and recovery procedures,and then testing them to determine if they are sufficient,is known as:

A)business continuity planning
B)disaster planning
C)business management planning
D)enterprise disaster planning

Question 8

An incident response plan is a set of written instructions for reacting to a security incident.

Question 9

A legal stop order is a notification sent from the legal team to employees instructing them not to delete electronically stored information or paper documents that may be relevant to the incident.

Question 10

Which term below describes a component or entity in a system which,if it no longer functions,will disable an entire system?

A)recovery site
B)recovery point
C)single point of failure
D)cascade point of failure

Question 11

Select below the type of cluster where standby server exists only to take over for another server in the event of its failure.

A)symmetric network
B)symmetric server
C)asymmetric network
D)asymmetric server

Question 12

How can an administrator keep devices powered when power is interrupted?

A)uninterruptible power supply
B)redundant power supply
C)uninterruptible system supply
D)replica power supply

Question 13

A service contract between a vendor and a client that specifies what services will be provided,the responsibilities of each party,and any guarantees of service,is known as:

A)service level agreement
B)recovery point objective
C)recovery time objective
D)service point agreement

Question 14

A location that has all the equipment installed but does not have active Internet or telecommunications facilities,and does not have current backups of data,is an example of a:

A)cold site
B)hot site
C)spare site
D)warm site

Question 15

A snapshot of the data is essentially a series of "reference markers" of the data at a specific point in time.

Question 16

A business continuity plan will help determine the mission-essential function or the activity that serves as the core purpose of the enterprise.

Question 17

A disaster recovery plan is developed for restoring the IT functions and services to their former state.

Question 18

In what type of cluster does every server perform useful work so that if one fails,the remaining servers take on the additional load?

A)symmetric network
B)asymmetric network
C)symmetric server
D)asymmetric server

Question 19

A business impact analysis may include succession planning or determining in advance who will be authorized to take over in the event of the incapacitation or death of key employees.

Question 20

A privacy impact assessment is used to identify and mitigate privacy risks.

Question 21

What kind of data can be lost when a computer is turned off?

A)volatile
B)static
C)non-volatile
D)persistent

Question 22

Which of the following is the sudden flow of electric current between two objects?

A)electromagnetic interference
B)Faraday interference
C)electrostatic discharge
D)electromagnetic pulse

Question 23

Using technology to search for computer evidence of a crime in order to retrieve information,even if it has been altered or erased,that can be used in pursuit of an attacker or criminal is an example of:

A)computer forensics
B)penetration testing
C)vulnerability testing
D)risk management

Question 24

What kind of slack is created from information stored on a hard drive,which can contain remnants of previously deleted files or data?

A)RAM slack
B)Edge slack
C)Drive file slack
D)Sector slack

Question 25

The goal of redundancy is to reduce what variable?

A)average time between failures
B)mean time to recovery
C)median time to recovery
D)median time between failures

Question 26

Which of the following is caused by a short-duration burst of energy by the source?

A)electromagnetic interference
B)Faraday interference
C)electrostatic discharge
D)electromagnetic pulse

Question 27

What RAID type is based on striping,uses multiple drives,and is not fault tolerant if one of the drives fails?

A)RAID 0
B)RAID 1
C)RAID 2
D)RAID 5

Question 28

A snapshot of the current state of a computer that contains all current settings and data is known as what option below:

A)system standard
B)system view
C)system image
D)system baseline

Question 29

Multiple sectors on a disk,when combined,are referred to as a:

A)cluster
B)track
C)slice
D)platter

Question 30

Which of the following is a system of hard drives based on redundancy and used for increased reliability and performance?

A)MTBF
B)RPO
C)RAID
D)ESD

Question 31

What term is used to describe a documentation of control over evidence,which is used to ensure that no unauthorized person was given the opportunity to corrupt the evidence?

A)chain of value
B)chain of use
C)chain of property
D)chain of custody

Question 32

What type of planning do many enterprises participate in that addresses a future event or circumstance that might possibly occur but cannot be predicted with any certainty?

A)contingency system evaluation
B)IT disaster planning
C)IT contingency planning
D)disaster recovery scenario

Question 33

What specific way can disaster recovery plans be tested?

A)alternative processing
B)restoration simulation
C)tabletop exercises
D)alternative exercises

Question 34

Which of the following is usually addressed in a disaster recovery plan? (Choose all that apply. )

A)Purpose and Scope
B)Restoration Procedures
C)Recovery Team
D)Business Procedures

Question 35

What value refers to the average amount of time until a component fails,cannot be repaired,and must be replaced?

A)average time between failures
B)mean time to recovery
C)mean time between failures
D)median time between failures

Question 36

What is the name for an image that consists of an evidence-grade backup because its accuracy meets evidence standards?

A)baseline
B)mirror image
C)logical image
D)thin image

Question 37

A metallic enclosure that prevents the entry or escape of an electromagnetic field is known as a:

A)bollard cage
B)mantrap
C)Faraday cage
D)Newton cage

Question 38

What type of assessment can determine if a system contains PII,whether a privacy impact assessment is required,and if any other privacy requirements apply to the IT system?

A)privacy threshold
B)privacy impact
C)privacy availability
D)privacy identification

Question 39

When the remaining cluster space of a partially filled sector is padded with contents from RAM.What is the name for this type of scenario?

A)Disk slack
B)RAM slack
C)ROM slack
D)Edge slack

Question 40

What RAID type below utilizes parity data across all drives instead of using a separate drive to hold parity error checking information?

A)RAID 0
B)RAID 1
C)RAID 2
D)RAID 5

Question 41

Describe the purpose of a disaster recovery plan.

Question 42

What are the objectives of disaster exercises?

Question 43

What are the steps in damage control?

Question 44

Discuss the purpose and importance of the chain of custody.

Question 45

Why should redundant networks be implemented in many enterprise environments?

Question 46

What is a hot site?

Question 47

What is required upon completion of an evidence examination?

Question 48

What do Windows computers do if a file being saved is not long enough to fill up the last sector on the disk?

Question 49

Explain how to best secure volatile data.

Question 50

Explain how an on-line UPS works and why their advantages when compared to off-line UPS units.